Recommended update for Java

This update for Java fixes the following issues:

plexus-archiver was updated from version 4.2.1 to 4.8.0:

- Changes of 4.8.0:

* Security issues fixed:

+ CVE-2023-37460: Avoid override target symlink by standard file in AbstractUnArchiver (bsc#1215973)

* New features and improvements:

+ Added tzst alias for tar.zst archiver/unarchived

* Bugs fixed:

+ Detect permissions for addFile

* Maintenance:

+ Removed public modifier from JUnit 5 tests
+ Use https in scm/url
+ Removed junit-jupiter-engine from project dependencies
+ Removed parent and reports menu from site
+ Cleanup after 'veryLargeJar' test
+ Override project.url

- Changes of 4.7.1:

* Bugs fixed:

+ Don't apply umask on unknown perms (Win)

- Changes of 4.7.0:

* New features and improvements:

+ add umask support and use 022 in RB mode
+ Use NIO Files for creating temporary files
+ Deprecate the JAR Index feature (JDK-8302819)
+ Added Archiver aliases for tar.*

* Maintenance:

+ Use JUnit TempDir to manage temporary files in tests
+ Override uId and gId for Tar in test
+ Bump maven-resources-plugin from 2.7 to 3.3.1

- Changes of 4.6.3:

* New features and improvements:

+ Fixed path traversal vulnerability
The vulnerability affects only directories whose name begins
with the same prefix as the destination directory. For example
malicious archive may extract file in /opt/directory instead
of /opt/dir.

- Changes of 4.6.2:

* Bugs fixed:

+ Fixed regression in handling symbolic links

- Changes of 4.6.1:

* Bugs fixed:

+ Normalize file separators before warning about equal archive entries

- Changes of 4.6.0:

* New features and improvements:

+ keep file/directory permissions in Reproducible Builds mode

- Changes of 4.5.0:

* New features and improvements:

+ Added zstd (un)archiver support

* Bugs fixed:

+ Fixed UnArchiver#isOverwrite not working as expected

- Changes of 4.4.0:

* New features and improvements:

+ Drop legacy plexus API and use only JSR330 components

- Changes of 4.3.0:

* New features and improvements:

+ Require Java 8
+ Refactor to use FileTime API
+ Rename setTime method to setZipEntryTime
+ Convert InputStreamSupplier to lambdas

* Bugs fixed:

+ Reproducible Builds not working when using modular jar

- Changes of 4.2.7:

* New features and improvements:

+ Respect order of META-INF/ and META-INF/MANIFEST.MF entries in a JAR file

- Changes of 4.2.6:

* New features and improvements:

+ FileInputStream, FileOutputStream, FileReader and FileWriter are no longer used
+ Code cleanup

- Changes of 4.2.5:

* New features and improvements:
+ Speed improvements

* Bugs fixed:

+ Fixed use of a mismatching Unicode path extra field in zip unarchiving

- Changes of 4.2.4:

* Bugs fixed:

+ Fixed unjustified warning about casing for directory entries

- Changes of 4.2.2:

* Bugs fixed:

+ DirectoryArchiver fails for symlinks if a parent directory doesn't exist

objectweb-asm was updated to version 9.6:

- Changes of version 9.6:

* New Opcodes.V22 constant for Java 22

* Bugs fixed:

+ Analyzer produces frames that have different locals than those detected by JRE bytecode verifier
+ Invalid stackmap generated when the instruction stream has new instruction after invokespecial to <init>
+ Analyzer can fail to catch thrown exceptions
+ `asm-analysis` Frame allocates an array unnecessarily inside `executeInvokeInsn`
+ Fixed bug in `CheckFrameAnalyzer` with static methods

- Changes of version 9.5:

* New Opcodes.V21 constant for Java 21
* New readBytecodeInstructionOffset hook in ClassReader
* Added more detailed exception messages
* Javadoc improvements and fixes

* Bugs fixed:

+ Silent removal of zero-valued entries from the line-number table

- Changes of version 9.4:

* Changes:

+ New Opcodes.V20 constant for Java 20
+ Added more checks in CheckClassAdapter
+ Javadoc improvements and fixes
+ `module-info` classes can be built without Gradle and Bnd
+ Parent POM updated to `org.ow2:ow2:1.5.1`

* Bugs fixed:

+`CheckClassAdapter` is no longer transparent for MAXLOCALS
+ Added public `getDelegate` method to all visitor classes
+ Analyzer does not compute optimal maxLocals for static methods
+ Fixed `SignatureWriter` when a generic type has a depth over 30
+ Skip remap inner class name if not changed in Remapper

maven-archiver was updated from version 3.5.0 to 3.6.1:

- Changes of 3.6.1:

* New Features:

+ Deprecated the JAR Index feature (JDK-8302819)

* Task:

+ Refreshed download page
+ Prefer JDK features over plexus-utils, plexus-io

- Changes of 3.6.0:

* Task:

+ Require Java 8
+ Drop m-shared-utils from deps

maven-assembly-plugin was updated from version 3.3.0 to 3.6.0:

- Changes of 3.6.0:

* Bugs fixed:

+ finalName as readonly parameter makes common usecases very complicated
+ Symbolic links get copied with absolute path
+ Warning if using Maven 3.9.1
+ Minimal default Manifest configuration of jar archiver should be respected

* New Features:

+ Support Zstandard compression format

* Improvements:

+ In RB mode, apply 022 umask to ignore environment group write umask
+ Added system requirements history

* Task:
+ Dropped deprecated repository element
+ Support running build on Java 20
+ Refresh download page
+ Cleanup declared dependencies
+ Avoid using deprecated methods of `plexus-archiver`

- Changes of 3.5.0:

* Bugs fixed:

+ File permissions removed during assembly:single since 3.2.0

- Changes of 3.4.2:

* Bugs fixed:

+ Fixed Excludes filtering

* Task:

+ Fixed examples to refer to https instead of http

- Changes of 3.4.1:

* Bugs fixed:

+ Fixed error build with shared assemblies

- C